Examkin

Question

Difficulty: MediumWeb Browser Security and Pop-Up/Redirect Troubleshooting

A corporate workstation is experiencing persistent web browser redirects to untrusted promotional websites whenever a user attempts to navigate to standard corporate URLs. In what order should a technician perform the following steps to properly remediate the browser security compromise?

  1. 1Disconnect the workstation from the network to prevent further unauthorized external communication.
  2. 2Terminate all active browser instances and suspicious executable processes using Task Manager.
  3. 3Remove unrecognized browser add-ons and reset the web browser to its default configuration settings.
  4. 4Inspect the Windows hosts file and clear any unauthorized manual proxy server entries.
  5. 5Perform a full system anti-malware scan, reconnect to the network, and verify proper browser operation.

Answer

The correct sequence of steps is: Disconnect the workstation from the network; Terminate active browser processes via Task Manager; Remove unrecognized browser extensions and reset browser settings; Inspect the Windows hosts file and clear unauthorized proxy settings; Perform a full system anti-malware scan, reconnect to the network, and verify proper browser operation.
Remediating a browser redirection issue follows standard malware response principles: first isolate the system from the network to stop active communication, terminate active processes, clean browser application components (extensions and settings), inspect OS-level redirection configurations (hosts file and proxy settings), and finally perform a comprehensive anti-malware scan before reconnecting to confirm resolution.

Step-by-Step Solution

1
Isolate the compromised machine from the network.
Network communication between the compromised browser/adware and external malicious servers is halted.
Isolation stops telemetry, prevents further adware payload downloads, and protects network assets.
2
Close active browser sessions and end malicious processes in Task Manager.
Memory-resident browser hijacker scripts and rogue helper objects are stopped.
Attempting to change settings while malicious processes are running can cause settings to immediately revert.
3
Purge rogue browser extensions and restore browser defaults.
Malicious search engines, home page hijacks, and pop-up scripts integrated into the browser profile are removed.
Browser add-ons are common vectors for search hijacking and persistent pop-up generation.
4
Review system-level network configurations including proxy settings and the hosts file.
System-wide traffic redirection rules configured in the OS layer are restored to default clean states.
Browser hijackers often inject loopback redirects into the hosts file or set up rogue local proxies to survive browser resets.
5
Execute an anti-malware scan, restore network access, and test web browsing.
System integrity is confirmed and verified clean before returning the system to normal operations.
Ensures no secondary malware persistence mechanisms remain active.

Key Concept

Browser Hijacker and Redirect Remediation Workflow
Rate this question

Topics

Web Browser Security and Pop-Up/Redirect Troubleshooting

More questions from this topic